119428eef659315e227b19046c4f4386_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

119428eef659315e227b19046c4f4386_JaffaCakes118
Size

640KB
MD5

119428eef659315e227b19046c4f4386
SHA1

0068b72366a54a58add225da334949361d897a52
SHA256

f9759624d05b9739230ee34516b482490f5eedd9176e1d524dddf3e0f8b50c6a
SHA512

e7ff0cc054628eb35ced14956abcf26a5fdcce1b51b4612ff9486d112768053e212a3ac74947112a318df4f513f92a1c2dd006ab12eafe80bda56b3566bed03f
SSDEEP

12288:fAtpjwaAnJV3tP0qAU12T8nx1KA96bcrXX4JblI0fZA+VRZWggGA7lGPm7+8yhjK:8ar112T4x1zKcrohlNfj2V4P+yhm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
119428eef659315e227b19046c4f4386_JaffaCakes118

Files

119428eef659315e227b19046c4f4386_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\game_ph2\0422-new\bin\release\sggameworldupdate.pdb

Sections

.text
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.spm
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE